Security
New attack tricks AI coding agents into installing malware: how the AGENTS.md trick works
A planted AGENTS.md file in your Downloads folder can steer AI coding agents like Codex into installing a malicious npm package. Here's how the attack works and seven ways developers can stay safe.